Conduct information security investigations as a result of security incidents identified by the Tier 1 security analyst and do the platform fine tuning.
Ensuring uptime, optimization enhancement of SIEM platform. This is core technical role and candidate is expected to work hands on as individual contributor over and above his supervisory roles over Tier-1 analyst.
Skills
In Depth knowledge on Attack techniques and industry leading frameworks like MITRE and NIST
Strong understanding of security technologies like Firewalls, DNS Security, Proxy, End point security.
Prior experience on log analysis is mandatory.
Professional level Certification in at least one industry leading SIEM product certifications is mandatory.
ITIL, CEH certification is preferable.
Strong understanding of security incident management and vulnerability management processes
Very good Communication skills
Should be having sufficient knowledge on LR equivalent SIEM technology ITSM Remedy solutions.
Prior Experience
5 to 7 years of experience out of which last 2 years should be in SOC operations as Tire2 Analyst